Application Security Engineer

2 weeks ago

Lagos, Lagos State, Nigeria CapitalSage Holdings Full-time
Role Purpose: Protect the Group's applications by identifying, assessing and reducing application security risks throughout the software lifecycle.

Key Responsibilities
Perform application security assessments, code reviews and security testing. Manage and optimize application security tools and processes, including Checkmarx. Conduct threat modelling and security architecture reviews for applications. Support remediation of OWASP and application-specific vulnerabilities. Assess APIs, web applications, mobile applications and other digital channels. Work with development teams to establish and enforce secure coding practices. Support security testing before production release. Maintain application security standards, metrics and risk reports. Requirements Relevant degree or equivalent professional qualification in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline. Relevant professional certifications will be an advantage and should align with the specific role. Demonstrable practical experience relevant to the position. Strong communication, analytical, documentation and stakeholder-management skills. Ability to operate in a regulated, technology-driven and multi-business environment. Preferred / Added Advantage Certifications OSCP – Offensive Security Certified Professional eWPT or equivalent web application security certification CSSLP – Certified Secure Software Lifecycle Professional Checkmarx certification/training (advantage) Benefits Industry Standard